Platform & DevOps·Packaging: containers and images
you shell into the container to debug it and there is no shell, because the image contains your binary and its libraries and nothing else.
Distroless image
Also calleddistroless, minimal image, scratch image
A base image with no package manager, no shell and no general-purpose utilities — only the runtime files an application needs. It cuts the vulnerability count dramatically and removes the tooling an attacker would use after a remote code execution. The trade is operational: debugging needs an ephemeral sidecar or a copy of the image with tools added, which teams discover during their first incident on one.